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PATENT APPLICATION 


METHOD FOR BLOCKING DENIAL OF SERVICE AND ADDRESS 
SPOOFING ATTACKS ON A PRIVATE NETWORK 

ABSTRACT OF THE DISCLOSURE 

A method is provided for blocking attacks on a private network (12). The 
method is implemented by a routing device (10) interconnecting the private network 
(12) to a public network (14). The method includes analyzing an incoming data 
packet from the public network (14). The incoming data packet is then matched 
against known patterns where the known patterns are associated with known forms of 
attack on the private network (12). A source of the data packet is then identified as 
malicious or non-malicious based upon the matching. In one embodiment, one of the 
known forms of attack is a denial of service attack and an associated known pattern is 
unacknowledged data packets. In another embodiment, one of the known forms of 
attack is an address spoofing attack and an associated known pattern is a data packet 
having a source address matching an internal address of the private network (12). 


DAL01:779380 


